← Back to search

io.github.chrischall/honeybook-mcp

chrischall Scanned 16d ago

HoneyBook client-portal MCP server for Claude — view contracts and invoices from wedding vendors

A
94.2 / 100

Versions

0.4.3latest
Jul 30, 2026
0.4.2
Jul 27, 2026
0.4.1
Jul 19, 2026
0.4.0
Jul 13, 2026
0.3.6
Jul 7, 2026
+ show 20 moreshow less
0.3.5
Jun 16, 2026
0.3.4
Jun 13, 2026
0.3.3
Jun 10, 2026
0.3.2
Jun 4, 2026
0.3.1
May 29, 2026
0.3.0
May 28, 2026
0.2.4
May 26, 2026
0.1.13
May 21, 2026
0.1.12
May 21, 2026
0.1.11
May 4, 2026
0.1.10
Apr 22, 2026
0.1.9
Apr 22, 2026
0.1.8
Apr 22, 2026
0.1.7
Apr 22, 2026
0.1.6
Apr 22, 2026
0.1.5
Apr 21, 2026
0.1.4
Apr 21, 2026
0.1.3
Apr 21, 2026
0.1.2
Apr 21, 2026
0.1.0
Apr 21, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 8

get_workspace
annotations: verified low

Get full detail for a workspace (vendor project). Includes status flags like has_sent_files, has_signed_files, has_paid_payments.

readOnlyHint true
use_magic_link
annotations: verified low

Capture a HoneyBook client-portal session via the fetchproxy 0.3.0 browser extension. Prerequisites: install the fetchproxy extension in Chrome/Safari, then open the vendor's magic-link URL in that browser so you're signed into their portal and leave that tab open. This tool then snapshots the auth fields out of the page's localStorage[\"HONEYBOOK_REACT_CURR_USER\"] into ~/.honeybook-mcp/sessions.json. The tab only needs to be open and signed in — nothing is sniffed off a live request, so it does not matter whether the page is idle. All other tools use the most-recently-activated session by default. The magic_link_url arg is used only to derive the portalOrigin (cache key) — the tool does NOT open or navigate to it.

readOnlyHint false
list_active_sessions
annotations: verified low

List the HoneyBook portal sessions currently active in this MCP (captured via use_magic_link). No API call.

readOnlyHint true
sign_contract
annotations: verified low

Sign a contract you received from a vendor. In v1 this returns a deep link to the HoneyBook portal instead of signing headlessly. Requires confirm:true.

destructiveHint true
list_workspace_files
annotations: verified low

List all files a vendor has shared with you (contracts, invoices, brochures, proposals). Optionally filter by file_type.

readOnlyHint true
get_workspace_file
annotations: verified low

Get detail for one workspace file. Returns a compact summary by default (metadata, vendor, event, pricing totals, payment schedule, agreement presence). Use `section` to drill into a specific part of the file: "pricing" for full line items + tax/svc detail, "agreement" for contract HTML + signatures, "payments" for full payment-schedule detail, "all" for the pruned full response, or "raw" for the entirely-unpruned response (may exceed MCP size limits on proposal-class files).

file_id string
readOnlyHint true
pay_invoice
annotations: verified low

Pay an invoice from a vendor. In v1 this returns a deep link to the HoneyBook portal instead of paying headlessly. Requires confirm:true.

destructiveHint true
list_payment_methods
annotations: verified low

List saved payment methods for your client account with a vendor. Empty array if none are saved.

readOnlyHint true

Permissions 2

network medium
Server uses network capabilities via: fetch()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 25

info
Tool 'get_workspace' annotations are consistent annotation_checker · 80%
info
Tool 'use_magic_link' annotations are consistent annotation_checker · 80%
info
Tool 'list_active_sessions' annotations are consistent annotation_checker · 80%
info
Tool 'sign_contract' annotations are consistent annotation_checker · 80%
info
Tool 'list_workspace_files' annotations are consistent annotation_checker · 80%
info
Tool 'get_workspace_file' annotations are consistent annotation_checker · 80%
info
Tool 'pay_invoice' annotations are consistent annotation_checker · 80%
info
Tool 'list_payment_methods' annotations are consistent annotation_checker · 80%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: esbuild@0.28.0 (GHSA-g7r4-m6w7-qqqr) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: get_workspace manifest_parser · 85%
info
Tool: use_magic_link manifest_parser · 85%
info
Tool: list_active_sessions manifest_parser · 85%
info
Tool: sign_contract manifest_parser · 85%
info
Tool: list_workspace_files manifest_parser · 85%
info
Tool: get_workspace_file manifest_parser · 85%
info
Tool: pay_invoice manifest_parser · 85%
info
Tool: list_payment_methods manifest_parser · 85%
info
Required env vars (3) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 236 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%